...computers: Samba not enforcing permissions inheritance

It’s frustrating when things don’t work as they should. While setting up a Samba server on SuSE 11, I had the pleasure of troubleshooting why permissions weren’t being inherited by children of a folder. I had what seemed like all of the appropriate settings in my smb.conf file. I looked over it a million times. inherit acls, inherit permissions, blah blah blah. It still wasn’t working and I had no idea why. New files COPIED the parent permissions but they weren’t INHERITED. In the Advanced Permissions dialog, the files all said “Inherited From: None” so I knew inheritance wasn’t working. After lots and lots of Googling, I saw someone suggest setting the vfs objects property. After I did that, everything worked! So here are some tips on getting permission inheritance working:

In your /etc/fstab, make sure you have the acl and user_xattrib mount options set for the partition that contains the files you are serving:

/dev/sda2 /local reiserfs acl,user_xattr 1 2

In your /etc/samba/smb.conf, make sure you have all the inherit options set to yes and the vfs objects option set:
inherit acls = yes
inherit owner = yes
inherit permissions = yes
vfs objects = acl_xattr
map acl inherit = yes

Keywords: samba 3.4.x suse sles 11 permissions inherit inheritance acls smb.conf smb

Add comment February 16th, 2011 at 10:48am

...computers: re-register ms-help protocol if deleted by hijackthis (address is not valid)


Add comment April 7th, 2009 at 04:01pm

...computers: can’t login to kde, nfs home, check free space on home dir


Add comment April 7th, 2009 at 04:01pm

...computers: no sound (dell precision m70, laptops, etc)

no sound (dell precision m70, laptops, etc)
http://www.kellys-korner-xp.com/top10faqs.htm #6
http://www.kellys-korner-xp.com/xp_tweaks.htm #371

Add comment April 7th, 2009 at 04:01pm

...computers: windows 2000 w2k wmi vbscript cscript wscript null 0×80041002

Can’t connect to winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv

stop “windows management instrumentation” service, rename “%windir%\system32\wbem\repository”, start service

http://www.microsoft.com/technet/scriptcenter/topics/help/wmi.mspx#EQKAC

Add comment April 7th, 2009 at 04:01pm

...computers: can’t start error log service, or automatic updates 0×80070005 access denied, or dtc

system event logs were set to read only

Add comment April 7th, 2009 at 04:01pm

...computers: Visual Studio 2008 Service Pack 1 install hangs near the end (warning 1909 command prompt lnk)

So continuing with my Visual Studio 2008 installs (and how horrible the installation procedure is), I had a system that ran the Service Pack 1 install and seemed to hang at the end. Normally, I just schedule the install and let it do its thing with unattended setups and an auto-reboot at the end. I got a call from the user saying the SP1 was still installing and this was 5 hours later. I know the SP1 install takes forever, but 5 hours was a little much. So I tried to cancel the install but no luck, so I had to end task SPInstaller.exe.

Off to the log files I go. Wait a minute…the SP1 log file is 5GB! What’s going on?! I wasn’t about to open such a huge file so I deleted all the log files and re-ran the install in non-unattended mode. Shortly after starting the install, it failed with an “Installation suspended, incomplete” message. I thought this meant something but in the end, all it means is that a previous install failed and it rolled some stuff back.

So I ran the install again and this time, it went further, like normal. I noticed on other systems the log file would only grow to 20-30MB so I waited until the log file grew to about 50MB and then end tasked the installer again. I opened up the log file and the end was filled with this message over and over:

Warning 1909. Could not create Shortcut Visual Studio 2008 Command Prompt.lnk. Verify that the destination folder exists and that you can access it.

Why couldn’t it create the shortcut? Who knows? Google, probably. I just searched for “warning 1909″ and saw a bunch of stuff about the Office installer failing with this message. None of the fixes seemed to apply to me. I checked the permissions at C:\Documents and Settings\All Users\Start Menu\Programs and everything seemed good. The VS2008 program folder existed and permissions were also normal.

Well, long story short, this forum thread helped me resolve my issue (I guess this problem also occurs with VS2005). It was on the second page of my search and it’s weird that if I had searched for my message with quotes around certain parts, this result would’ve been hidden by Google.

Anyway, I looked at the system environment variables to see if the ComSpec variable was set incorrectly. And it sure was. It was…missing. Argh, why did the user do that for?! I recreated the ComSpec variable and set it to %SystemRoot%\system32\cmd.exe and re-ran the installer. Everything worked after that. I guess the installer uses that environment variable to determine how to create that command prompt shortcut.

3 comments December 4th, 2008 at 12:28pm

...computers: .NET Framework 2.0 SP1 setup error 25015 failed to install assembly access is denied

So I’m running the Visual Studio 2008 install on a system the other day and it’s failing. Long story but we’re installing the .NET Framework 2.0 SP1 redistributable first to avoid the automatic reboot with the unattended VS2008 install. So the .NET install runs in unattended mode and near the end, it gives an error:

Error 25015.Failed to install assembly ‘C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll’ because of system error: Access is denied.
(more…)

5 comments December 4th, 2008 at 11:58am

...computers: ndis.sys driver_irql_not_less_or_equal blue screen (bsod) after installing Virtual PC and booting up with network cable plugged in

Ever since Microsoft began offering Virtual PC for free to download, a lot of users have been installing it to test out the usefulness of virtual machines. A couple laptop users complained that their machines would blue screen while starting up Windows with the wired network cable plugged in, although Windows would start up fine with the cable unplugged (which could then be plugged back in after login). I couldn’t figure it out but did narrow it down to Virtual PC 2004 being installed. I finally had the chance to work on one of these laptops for longer than five minutes and began my search on Google for the answer since I sure couldn’t do it myself. (more…)

2 comments January 5th, 2007 at 03:04pm

...computers: SUSE AutoYaST setting X keyboard layout to German

Wondering why your Y and Z keys are swapped in X? That’s probably because the keyboard layout is set to German (de) instead of English (us). Did you say you used SUSE AutoYaST and had it configured for the english-us keyboard mapping? Well, we had a couple of AutoYaST configuration files and the layout problem only occurred for a couple of them. I compared the XML files and noticed that in the keyboard section, the ones that didn’t work contained extra settings before the keymap setting (I didn’t make them!). I removed the entries and now the keyboard layout is set correctly! (more…)

Add comment February 16th, 2006 at 03:30pm

Previous Posts


Categories

Links

Feeds